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(57) Abstract 

The invention comprises a system for assisting an organisation to implement and maintain compliance management programmes, 
the system comprising a plurality of modules relating to particular legislative or other obligations with which the organisation is required 
to comply; at least one master database containing information on said legislative or other compliance obligations; at least one slave 
database containing and allowing entry of information on activities of and incidents or accidents in the organisation and assessments of 
the organisation; and report generating means for generating a report on any action required to render the organisation compliant with the 
legislative or other requirements in the master database. 
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AN AUTOMATED MAINTENANCE SYSTEM 

FIELD 

The invention comprises a system and method for assisting the implementation and 
5 maintenance of compliance programmes required by legislation or established through 
management objectives for the benefit of the organisation. 

BACKGROUND 

10 Programmes to ensure compliance with various obligations placed on industry are 
driven by the legislation which places compliance obligations upon businesses, such 
as legislauon concerning the protection of people, the environment, shareholders, 
equities and other business activities for example. Occupational health and safety 
legislation generally places the responsibility for the management of health and safety 
15 in the workplace in the hands of employers and their staff. This responsibility 
includes the prevention of harm to an employee by identifying and isolating hazards 
and where practical taking action to control, eliminate, and/or minimise hazards. The 
overall objective is to reduce workplace injuries, accidents, illnesses and fatalities 
through an effective health and safety management system. 

20 

Employers are generally required by law to provide an auditable trail of their acUons 
that is sufficiently transparent to show they have an effective management programme 
which includes for example hazard identification, appropriate training and supervision 
of staff, recording details of all accidents and periodically reporting accidents to the 
25 appropriate investigative authority, establishing emergency procedures, and 
management of principals, contractors and subcontractors. 
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Similar legislative requirements apply to management of the effects a plant may have 
on the environment, and how under company law a company manages its shareholders 
assets. 

5 Management within an organisation may also establish compliance programs within 
the organisation aimed at meeting a management objective within the organisation, for 
example achieving and implementing procedures for ISO accreditation and 
implementation, particularly ISO 14001 and ISO 9001. 

10 Many businesses are not able to manage the vast number of scenarios that can arise 
and certainly cannot manage these in a "real time mode". Compliance may be required 
under legislation covering companies, health and safety, consumer protection, 
electricity, fair trading, human rights, privacy, environmental management, property, 
and land transport legislation. Risk management programs often tend to be reactive 

1 5 and address issues randomly. Many companies are not meeting the minimum required 
standards of compliance. This is partly due to a lack of commitment and 
understanding as to how to manage compliance issues, and the inability to be proactive 
towards the handling of the vast number of issues involved. 

20 Many organisations have implemented paper and/or data based compliance 
programmes, however these are not fully integrated and fully comprehensive. For 
example, to meet New Zealand Health and Safety Act (NZHSE Act) compliance 
requirements often each department of a company is supplied with a resource kit 
containing information on hazard identification, tools for hazard assessment, a serious 

25 harm schedule, information on how hazards are to be controlled, and forms to record 
the department hazard assessment. The intention is that each department record its 
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own hazard identification on forms kept in that department's kit or in the system in 
some form. This type of programme, although adequate for each department if it is 
kept up to date, has proved inefficient for overall control as it is difficult to continue 
on an ongoing basis to identify and assess significant hazards, because this activity is 
5 not a natural part of the core operational business. It is also difficult to cross- 
reference hazards and control measures between departments or with others affected 
by hazards such as contractors. 



For example, one department may engage in the activity of storing oil. This one activity 
10 may have many risk-causing aspects such as being stored near water or heat. Each 
of these aspects have a number of results which may occur if an event occurs such as 
environmental damage to waterways and wildlife through oil seepage, and injury or 
death to employees in the event of an explosion. Each effect has a number of controls 
involving recovery procedures and plans to minimise the risk. 

15 

For a department to ensure compliance it must implement all the necessary controls 
for a particular activity. This involves cross-referencing each activity to related 
aspects, effects and controls. In general a paper based system or conventional data 
based system is unable to assist In this process. The conventional interrelated data 
20 base approach is also unable to handle these requirements because of the large amount 
of data entry required and large number of controls for each activity. An exponentially 
increasing number of relationships between tables and other components of the 
database must be set up in advajice by the database designer in such prior art systems. 



25 
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SUMMARY OF INVENTION 

An object of the invention is to provide an improved system and method for assisting 
the implementation and maintenance of a compliance programme. 

5 

In broad terms the invention comprises a system for assisting an organisation to 
implement and maintain compliance management programmes, the system comprising 
a plurality of modules relating to particular legislative or other obligations with which 
the organisation is required to comply; at least one master database containing 

10 information on said legislative or other compliance obligations; at least one slave 
database containing and allowing entry of information on activities of and incidents or 
accidents in the organisation and assessments of the organisation; and report 
generating means for generating a report on any action required to render the 
organisation compliant with the legislative or other requirements in the master 

15 database. 

In a further aspect the invention comprises a computer-implemented method for 
assisting an organisation to implement and maintain compliance management 
programmes, comprising the steps of providing a plurality of modules relating to 

20 legislative or other obligations with which the organisation must comply; providing at 
least one master database containing information on said legislative or other 
compliance obligations; providing at least one slave database containing and allowing 
entry of information on activities of and incidents or accidents in, and assessments of 
the organisation; retrieving data from the slave database about the organisation; 

25 retrieving legislative or other compliance requirements from the master database: and 
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BRIEF DESCRIPTION OF THE DRAWINGS 

A preferred form of the method and system for assisting the implementation of a 
compliance programme will now be described byway of example and without intending 
5 to be limiting, with reference to the accompanying drawings in which: 

Figure 1 shows a preferred embodiment of the invention; 

Figure 2 illustrates the main menu screen of the preferred form system: 

10 

Figure 3 shows the menu screen of one module of the system: 
Figure 4 details one option from the menu screen of Figure 3; 
1 5 Figure 5 shows the menu screen of another module of the system: 
Figure 6 shows one option from the menu screen of Figure 5; 
Figure 7 shows another option from the menu screen of Figure 5: 

20 

Figure 8 illustrates the navigation function of the invention; 
Figure 9 also illustrates the navigation function; 
25 Figure 10 illustrates a prior art data structure arrangement; and 
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Figure 1 1 illustrates the data structure of the invention. 
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DETAILED DESCRIPTION OF PREFERRED FORM 

5 Figure 2 shows one form of the invention. The system has a CPU (central processing 
unit) 2, a memory 4, and interface circuits 6 and 8, these four components being 
connected to each other by a system bus 10. The interface circuit 6 is connected to 
an input device 12. (for example a keyboard and mouse) and a display device 14. 
Interface circuit 8 is connected to a storage unit 16, such as a hard disk or floppy disk 
10 drive. Data input from the input device 12 is supplied to the CPU 2 via interface 
circuit 6 and system bus 1 0. Display data is supplied from CPU 2 to the display device 
14 via the system bus 10 and interface circuit 6. 

Preferably the invention is implemented on a PC having at least 16 MB RAM and 
1 5 operating system of Microsoft Windows 3.1 1, Windows 95 t Windows 97, Memphis or 
Windows NT. Preferably Microsoft ACCESS has been installed on the storage unit 16 
together with data and appropriate programmed software to support the invention. 
Alternatively the invention is installed on storage unit 16 as a stand alone application 
independent of Microsoft Access. Preferably storage unit 16 also has installed 
20 spreadsheet and word processing software, for example Microsoft Excel, AMIPRO. 
LOTUS and Microsoft Word. 

Components 2. 4, 6,8, 12. 14 and 16 may be set up as a stand-alone computer or may 
be connected to further components in a network. Networks may be of any type, for 
25 example internet, intranet, local area and wide area networks. The system may 
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therefore be implemented on separate networked computers accessible from all or 
selected levels of an organisation. 

Figure 2 illustrates the main menu of the preferred form system shown on display 
5 device 14. Using input device 12 a user may access as menu options a Health and 
Safety Manager module, an Environmental Manager module, a Property Manager 
module, a StafT Manager module, and a Training Manager module. Each module is 
related to a particular piece of legislation with which an organisation must comply. 
Any system may include more or less or other similar modules, such as further 
10 modules related to various other pieces of legislation or modules relating to 
management established objectives and procedures with which compliance is to be 
monitored, for example ISO accreditation and compliance. 

The Health and Safety Manager module, accessible as an option from the main menu, 
15 is directed to compliance with occupational health and safety legislation under which 
organisations must typically establish effective methods for identifying and managing 
existing, new and potential instances of occupational overuse syndrome (OOS) in the 
workplace and regularly review these to see whether the instances of OOS are 
significant and require further action. 

20 

Figure 3 shows the Health and Safety Manager module user screen presented to the 
user on display device 1 4. This screen displays a plurality of sub-modules which may 
be selected by the user with input device 12. Some of the sub-modules comprise text 
documents, for example the Training Document Library, the Procedures Document 
25 Library and the General Document Library. These allow various documents (for 
example on-line manuals on compliance requirements, standards and guidelines) to 
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be stored in storage unit 16 and memory 4 for display on display unit 14 when 
selected by the user. The libraries may be preloaded on to storage unit 16 and 
preferably a user may also store further information in storage unit 16 based on 
operational experience to build up comprehensive information on the organisation's 
5 compliance needs. 

The Libraries form part of a conceptual master database of information, which may 
actually be implemented either as a single database in storage unit 16, or a plurality 
of linked databases installed on storage unit 16. or a plurality of databases installed 
10 on a plurality of storage units. The master database is in contrast to a conceptual 
slave database which may be installed on one or many storage units in the same way 
as the master database. The slave database is used to record information about an 
organisation entered by the user. This information includes activities, aspects, effects 
and controls. 

15 

The invention preferably makes provision for supplementing the master database by 
the entry of compliance criteria data into master databases from company records and 
the user's experience as situations arise and policy and legislative requirements are 
imposed. For example an environmental compliance requirement driven by legislation 
20 and/or company policy has definable criteria and rules. 

Another sub-module of the Health and Safety module, as shown in Figure 3, is the 
Hazard Register. Using the input device 12, the user may select the Hazard Register 
which results in the form shown in Figure 4 being presented on display device 1 4. The 
25 Hazard Register permits the user to store in the slave database information about 
hazards in an organisation. A hazard may have been identified in a number of ways, 

8 
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for example an accident, an incident, a hazard or peril assessment, an audit or an 
observation. As shown in Figure 4 the user is presented with a comprehensive data 
entry facility, eliciting information such as the particular division of the organisation, 
a hazard description, hazard assessment and hazard isolation and so forth. 

5 

A common hazard in an office environment is the risk to computer operators of OOS. 
This hazard is prevented by the use of appropriate office furniture and sensible work 
rules for example mandatory rests, and by training on correct posture. A portable or 
mounted digital camera may capture images of an operator's work station. Digital 
1 0 photographs of operator posture and work station ergonomics can then be loaded into 
the slave database of the Health and Safety Manager of the slave database and 
compared with a correct example from the master database. 

The Hazard Register form allows users to enter data in a plurality of formats. One 
15 example is the use of a list-box or combo-box which retrieve a set of values from the 
master database for the user to select one value. For example, if the user selects the 
Hazard Source field in which to enter data, the Hazard Register form presents a 
number of alternatives from which the user may select a particular hazard source 
retrieved from the master database. Other formats which may be used include boxes 
20 in which text, numerals, currency values, true/false options and or OLE formats such 
as text documents. The Hazard Register form includes programmed macro software 
which ensures that the correct type of data is entered into each box. For example, the 
Hazard Register form includes macro software to ensure that a currency value is 
entered into the Control Cost box. 

25 
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The Hazard Register, by way of example, forces the user to follow a process and 
pattern of data entry which ensures that relevant data is captured, as the relevant data 
must be entered by the user when viewing the Hazard Register on display device 14, 
As the user must in some cases select data from a list retrieved from the master 
5 database, this ensures that the data is meaningful. Screen displays show where action 
is required and reports on priority issues. 

Following the steps on the various risk assessment forms, the invention retrieves data 
by searching through the fields in the master databases. This searching may be 
10 implemented in a number of ways, for example macro code to populate a list-box or 
combo-box, or code to quick-find keywords in a section of text or form. Alternatively 
the invention may comprise specific macro code segments for searching other 
components of the invention. 

15 Data entered into the form is stored in the slave database installed in the storage unit 
16 to form a profile and assessment criteria for the circumstance or activity being 
assessed. 

The invention also includes a risk assessment means which constantly compares data 
20 in the slave database about events such as activities, incidents, accidents and 

assessments with compliance criteria from the master database. Byway of example. 

the Hazard Register includes Severity and Frequency boxes. The user selects a value 

for the Severity box from a set of criteria retrieved from the master database. 

Preferably the range of values is from 1 (not severe) to 4 (very severe). The user also 
25 selects a value for the Frequency box from a range of values, preferably 1 (infrequent) 

to 5 (very frequent). 
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The invention determines anumerical priority or risk assessment rating as the product 
of severity and frequency, and places the rating in the rating box. The rating is assigned 
to the activity, incident, accident or assessment and stored in the slave database. The 
invention includes programmed macros which bring to the attention of the user 
5 hazards which exceed a certain rating and labels these hazards as significant. 
Preferably hazards with a risk assessment rating above a threshold of 10 are nagged 
as significant. The user may specify the threshold value, enabling an organisation to 
concentrate first on high priority hazards by specifying a high threshold, then lowering 
the threshold to concentrate on lower priority hazards. Hazards flagged as significant 
10 preferably are continually brought to the attention of the user until all actions and 
performance criteria are met. Preferably the invention may produce reports detailing 
particular hazards at specific rating thresholds. 

Figure 5 shows the user screen for another module, the Environmental Manager 
15 module. This module comprises a number of sub-modules including a Training 
Document Library. Procedures Document Library, and General Procedures Library 
which contain information on environmental compliance requirements, and standards 
imposed by environmental protection legislation, and guidelines for compliance with 
the legislation. The data in the master database may be preloaded or may be input by 
20 the user based on operational experience to build up comprehensive information on 
the organisation's compliance needs. 

Again the Environmental Manager module provides the user with forms with which to 
update the slave data base containing data about events within the organisation such 
25 as environmental incidents and assessment reports. The slave database may be 
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updated using a number of sub-modules including Environmental Risk Investigation, 
Environmental Risk Identification, Employee Training etc. 

The master database and slave database associated with the Environmental Manager 
5 Module operate in the same way as in the Health and Safety Manager module 
previously described. Figure 6 shows the form displayed on the input device 12 for 
the Environmental Risk Investigation module. As shown, the invention elicits 
information from the user on environmental risks in the same way as for Heath and 
Safety Hazards as described above. 

10 

The Environmental Manager Module includes an Environmental Risk Identification 
form as shown in Figure 7. The form includes an Open Hazard Register box. thereby 
reminding the user that identification of an environmental risk requires further input 
as to hazards. Once the user selects, using the input device 12, the Hazard Register, 
15 the invention automatically traverses to the Hazard Register shown in Figure 4 ready 
for input by the user. This traversal is implemented by a program macro triggered by 
a click-event. 

From the Environmental Risk Identification form the user is also able to traverse 
20 directly to the Accident Register form and the Environmental Risk Investigation form. 
If an actual incident occurs and is entered in tfie system, for example into the Hazard 
Register form, the system automatically traverses to the Accident/Incident Register 
shown in Figure 3 where an assessment is made about the harm or potential harm of 
the incident. 

25 
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The system then automatically traverses to the Employee Training Register where 
details of training are entered and compares these against training criteria obtained 
from the Training Document Library in the master database. Details of the training 
criteria are attached to the personal training record for the person involved. The 
5 system then traverses the personal record to input health assessment data required 
by law and prepares the health assessment routines required for the persons Involved. 
The traversing function is continued to include hazard management for property and 
the environment, thereby providing a comprehensive model of management, 
compliance and control over individual situations. 

10 

This traversal is provided by a navigator, the operation of which is illustrated in 
Figures 8 and 9. The navigator guides the user on a step-by-step basis on the actions 
necessary to implement compliance management procedures, through the system and 
through wider networks to other systems. Other systems include other software 
1 5 packages for example spreadsheet and word processing software and other databases. 
By use of the navigator, the user is able to efficiently select data and criteria for 
assessment from the master database of a module and attach it to the compliance 
issue. This navigation and assembly allows efficient and accurate compilation of data 

which ranges from two digit numerical ratings to billion bit data objects. The navigator 
0 may operate on an area wide network or any such networking system enabling anyone 

within an organisation to use and interact with the system making compliance 

transparent at all levels of an organisation. 



The navigator uses its tools to locate. Import and attach virtually unlimited types and 
25 amounts of data relating to compliance in the master database and attaches this 
information directly to each circumstance, activity and entity for entry into the slave 
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database. This technique is used lo enable a conventional office and company 
computer based administration programme to interface with the compliance 
management system. Documents, reports, spreadsheets, drawings, pictures and any 
other form of OLE based objects relating to compliance management generated 
5 throughout an organisation are captured by the navigator and stored in the appropriate 
location. This information is stored in master and slave databases used to support the 
management criteria stored in the program. 

Prior art systems of this kind use relationships which are specified by the database 
1 0 designer when the system is implemented. An example of a prior art system is 
illustrated in Figure 10. In conventional database design, relationships between tables 
are implemented by first identifying the fields in the tables, then setting relationships 
between fields using manual drag and drop actions or relationship building tools such 
as WIZARD. Once these relationships have been formed the relational boundaries 
1 5 cannot be transgressed and the relational aspects of the database design constrain use 
outside predefined relational criteria. 

Defining relationships between tables may be difficult due to the complexity of the data 
represented. For example, each organisation may have a number of activities in which 

20 they may engage. Each activity may have a number of aspects and each of these aspects 
may in turn have many effects. Each effect has a number of controls involving plans 
and recovery procedures to minimise the risk. The exponential number of controls 
needed for a single activity places significant demands on conventional database 
designs. A single organisation may have many departments and employees. Individual 

25 employees may have accidents in departments other than the one in which they work. 
Other individuals who are not employees at all of the organisation may have accidents 
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in one or more departments. The present invention permits implementation of a 
database design in which the data is not placed in tables with predefined relationships 
between tables to handle these situations. 

5 The system of the invention shown in Figure 1 1 is designed with a special relational 
structure allowing relationships to be dynamically created and destroyed when 
required by the navigator. 

Macros operate to make and abandon relationships which enable the relational 
10 boundaries associated with tables and queries to be traversed. The macros locate 
where data is physically located and what action is to be taken on it. This is essential 
for all tables containing compliance on such issues as health and safety of people, 
environment, property etc to be cross referenced so as relevant scenarios for each 
assessment can be compiled in the slave database tables. 

15 

Relationships between the various fields in the databases are created in the source 
code and switch on and off using macro functions triggered by Windows events such 
as click, double-click, mouse-down, mouse-move etc. This allows the macro functions 
to be executed when the user opens and closes the related database access forms and 
20 operating tools such as list-box and combo-boxes in the forms enabling unlimited 
combination of data from the fields in the master database to be assembled in the slave 
database. 



By way of example, a department has a one to many relation with its staff (a 
department has many staffl. However stair can have accidents in many departments 
which causes a conflict with this one to many relationship. The source code contains 
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a macro that disables the relationship between the department and its staff. All staff 
in each department are identified and this information is made available to the user 
so that the user may select the staff member who has had an accident and place all 
relevant information about that staff member in the slave database as a record of the 
5 accident even if that person is not part of the department. This enables the many 
cross relationships necessary to operate the compliance program. 

This macro assisted handling of relationships provides the system with greater 
flexibility than has previously been possible, as there are no constraints on the types 
10 of relationships which may be made between various components of the system. It 
also means that the modules need not be stored in a rigid data format imposed by the 
database designer, which may render some modules incompatible and unable to 
interact. 

15 A consequence of the design of the invention means that additional modules may be 
incorporated into the system at a later date without substantial modification. The types 
of permissible modules and sub-modules may range from simple forms to complex 
application program. This enables the use of a comprehensive number of software 
applications to interact to capture and present the data. 

20 

In summary the operation of the system of the invention is as follows: 

1 . The program makes provision for the entry of compliance criteria data into 

Master databases from company records and experience as situations arise 
25 and policy and legislative requirements are imposed. 
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2. Following the steps on the various risk assessment forms, the program 

searches through the fields in the master databases to match criteria from 
the master databases records with the activity being assessed. 

i 3. This data is lodged in the fields of the slave databases to form a profile and 

assessment criteria for the circumstance or activity being assessed. 



Relationships between the various fields in these databases are created in the 
source code and switch on and ofT using macro functions when opening and 
closing the related database access forms and operating tools such as list and 
combo-box icons enabling an unlimited combination of data from the fields 
in the master database to be assembled in the slave databases. 

The scenarios are rated through a process of questions and answers and the 
selected priority issues above a criteria of 10 are reported on. Issues in the 
priority categories remain before management for action until all 
performance criteria are met. 

The program combines and matches compliance requirements that 
transverse many areas of compliance areas and inter related issues by 
combining data and criteria from any part of the databases, computer and 
network systems. Computer and network navigation and functioning is 
facilitated by the navigator system. 



17 



WO 98/1 1477 PCT/NZ97/OO106 

7. The navigator uses its tools to locate, import and attach virtually unlimited 

types and amounts of data relating to compliance and attaches this 
information directly to each circumstance, activity and entity. 

5 Using data from the various modules, the system may produce management reports 
including accident records together with statistics to assist an organisation to 
implement and maintain compliance management programmes. The management 
reports may include information about hazard management programmes, workplace 
control procedures and checklists. Generation of these reports permits action to be 
10 taken by the organisation to render it compliant with the legislative requirements in 
the master databases. 

The foregoing describes the invention including preferred forms thereof. Alterations 
and modifications as will be obvious to those skilled in the art are intended to be 
15 incorporated within the scope hereof, as defined in the accompanying claims. 
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CLAIMS: 

1 . A system for assisting an organisation to implement and maintain compliance 

management programmes, the system comprising: 
5 a plurality of modules relating to particular legislative or other obligations 

with which the organisation is required to comply: 

at least one master database containing information on said legislative or 
other compliance obligations; 

at least one slave database containing and allowing entry of information on 
10 activities of and incidents or accidents in the organisation and assessments of the 
organisation; and 

report generating means for generating a report on any action required to 
render the organisation compliant with the legislative or other requirements in the 
master database. 

15 

2. A system according to claim 1 further comprising risk assessment means 

interfaced to assign a priority rating to the activity, incident, accident or assessment 
in the slave database. 

: 0 3 . A sys tern according to claim 2 wherein the report generating means compares 

the priority rating of each activity, incident, accident or assessment and generates a 
report on all activities, incidents, accidents or assessments above a predefined 
threshold. 
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4. A system according to claim 3 wherein the predefined threshold may be 

altered, thereby allowing an organisation to successively lower the threshold as high 
priority activities, incidents, accidents or assessments are addressed. 

5 5. A system according to any one of the preceding claims wherein relationships 

within the master database and the slave database are dynamically created and 
destroyed as required. 

6. A system according to any one of the preceding claims arranged to guide a 
10 user on actions necessary to implement compliance management procedures. 

7. A system according to any one of the preceding claims wherein the master 
database is able to be updated by a user with additional compliance requirements 
based on the user's operational experience. 

15 

8. A computer-implemented method for assisting an organisation to implement 
and maintain compliance management programmes, comprising the steps of: 

providing a plurality of modules relating to legislative or other obligations 
with which the organisation must comply; 
20 providing at least one master database containing information on said 

legislative or other compliance obligations; 

providing at least one slave database containing and allowing entry of 
information on activities of and incidents or accidents in. and assessments of the 
organisation; 

25 retrieving data from the slave database about the organisation; 
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retrieving legislative or other compliance requirements from the master 
database: and 

generating a report on action to be taken to render the organisation compliant 
with the legislative or other compliance requirements in the master database. 

5 

9. A method according to claim 8 further comprising the step of assigning to the 

activities, incidents, accidents or assessments a numerical priority rating and storing 
the priority rating in the slave database. 

10 10. A method according to claim 9 further comprising the steps of retrieving from 
the slave database a priority rating of the activities, incidents, accidents or assessments 
and generating a report on all activities, incidents, accidents or assessments above a 
predefined threshold. 

15 11. A method according to claim 10 including providing means to alter the 
predefined threshold, thereby allowing an organisation to successively lower the 
threshold as high priority activities, incidents, accidents or assessments are addressed. 

12. A method according to any one of claims 8 to 1 1 including the steps of 
20 dynamically creating and destroying relationships within the master database and the 

slave database as required. 

13. A method according to anyone of claims 8 to 12 including the step of guiding 
the user on the actions necessary to implement compliance management procedures. 

25 
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14. A method according to any one of claims 8 to 13 including the step of 
providing means for the user to update the master database with additional compliance 
requirements based on the user's operational experience. 
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